ci: run CodeQL on push to main/stable branches as well
    
    Since we need results for the base branches as well in order to have
    something to compare against.
    
    Follow-up to cbe25d0dccdd3f2901a1e74a665c068f42dae9f5.